Jenkins Project Jenkins Qualys Container Scanning Connector Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins Qualys Container Scanning Connector Plugin: 1 record(s), with affected versions and fixes.
CVE-2026-70440
Medium · 5.4
CWE-79 Aug 5, 2026
Cross-site Scripting (XSS) in Jenkins Project Jenkins Qualys Container Scanning Connector Plugin
Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.